Openvswitch vulnerabilities

Products

• Openvswitch 22

Newest

• fedora, openvswitch, rdo openstack rdo +5 more +7 more Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet CVE-2023-3966 Fix available 7.5 HighFebruary 8, 2024
• openvswitch openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in... CVE-2024-22563 Fix available 7.5 HighJanuary 19, 2024
• openvswitch, fedora, red hat fast datapath for rhel 7 +12 more +14 more Openvswitch don't match packets on nd_target field CVE-2023-5366 Fix available 7.1 HighOctober 6, 2023
• openvswitch, debian linux +1 more An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch. CVE-2022-4338 Fix available 9.8 CriticalDecember 31, 2022
• openvswitch, debian linux +1 more An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch. CVE-2022-4337 Fix available 9.8 CriticalDecember 31, 2022
• openvswitch The TSS (Tuple Space Search) algorithm in Open vSwitch 2.x through 2.17.2 and 3.0.0 allows remote... CVE-2019-25076 Fix available 5.8 MediumSeptember 8, 2022
• [unknown] dpdk, dpdk data plane development kit, openvswitch +1 more +3 more A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected... CVE-2022-0669 Fix available 6.5 MediumApril 29, 2022
• canonical ubuntu linux, fedoraproject fedora, openvswitch +1 more +3 more A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An... CVE-2021-3905 Fix available 7.5 HighNovember 8, 2021
• openvswitch Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in... CVE-2021-36980 Fix available 5.5 MediumJuly 20, 2021
• openvswitch, debian linux, fedoraproject fedora +2 more A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet... CVE-2020-35498 Public exploitFix available 7.5 HighFebruary 10, 2021
• openvswitch, fedoraproject fedora, lldpd project lldpd +14 more +16 more A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause... CVE-2020-27827 Fix available 7.5 HighJanuary 13, 2021
• canonical ubuntu linux, debian linux, openvswitch +1 more +3 more An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6. The decode_bundle function... CVE-2018-17206 Fix available 4.9 MediumSeptember 19, 2018
• canonical ubuntu linux, openvswitch, redhat openstack +2 more An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting... CVE-2018-17205 Fix available 7.5 HighSeptember 19, 2018
• canonical ubuntu linux, debian linux, openvswitch +1 more +3 more An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting... CVE-2018-17204 Fix available 4.3 MediumSeptember 19, 2018
• openvswitch In lib/ofp-util.c in Open vSwitch (OvS) before 2.8.1, there are multiple memory leaks while... CVE-2017-14970 Fix available 5.9 MediumOctober 1, 2017
• openvswitch In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer... CVE-2017-9264 Fix available 9.8 CriticalMay 29, 2017
• openvswitch In Open vSwitch (OvS) 2.5.0, a malformed IP packet can cause the switch to read past the end of... CVE-2016-10377 Fix available 8.8 HighMay 29, 2017
• openvswitch In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow... CVE-2017-9265 Fix available 9.8 CriticalMay 29, 2017
• openvswitch In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to... CVE-2017-9263 Fix available 6.5 MediumMay 29, 2017
• debian linux, openvswitch, redhat openstack +2 more +4 more In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message,... CVE-2017-9214 Fix available 9.8 CriticalMay 23, 2017
• openvswitch, redhat openshift +1 more Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2... CVE-2016-2074 Fix available 9.8 CriticalMarch 28, 2016
• openvswitch Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca... CVE-2012-3449 Fix available 3.6 LowAugust 7, 2012